procedures, and compliance frameworks. Build and manage a cross-functional procurement team (including vendor and sourcing specialists). Vendor & Partnership Management Manage complex vendor relationships across hardware, software, cloud, security, and telecom. Oversee vendor compliance with SLA, SOC 2, and other applicable frameworks. Maintain partnership requirements (e.g., Microsoft, Dell, Cisco), including certifications and revenue thresholds. Procurement Operations Oversee all … procurement lifecycle activities: assessment, process, negotiation, order fulfillment, and contract lifecycle. Work closely with Sales, Service Delivery, Legal, Security, and Finance for procurement alignment. Build and improve CPQ and procurement automation workflows to increase speed and accuracy. Procurement as a Service ( PraaS) Co-lead the launch of PraaS for Atlas clients, including pricing, fulfillment, client service, and logistics. Create … quarterly business reviews with strategic vendors. Risk Management & Compliance Own procurement risk framework across vendor, delivery, regulatory, and reputational risk. Lead due diligence for new vendors in collaboration with InformationSecurity and Legal. Track and ensure contract compliance across the entire vendor portfolio. Requirements Must-Have 7-10+ years of experience in procurement leadership roles, ideally within More ❯
Reading, Berkshire, United Kingdom Hybrid / WFH Options
Bowerford Associates
Prem, Big Data and Data Lake environments. Expert knowledge in data technologies, data transformation tools, data governance techniques. Strong analytical and problem-solving abilities. Good understanding of Quality and InformationSecurity principles. Effective communication, ability to explain technical concepts to a range of audiences. Able to provide coaching and training to less experienced members of the team. Essential … Languages such as Spark, Java, Python, PySpark, Scala or similar (minimum of 2). Extensive Big Data hands-on experience across coding/configuration/automation/monitoring/security is necessary. Significant AWS or Azure hands-on experience. ETL Tools such as Azure Data Fabric (ADF) and Databricks or similar ones. Data Lakes: Azure Data, Delta Lake, Data More ❯
Employment Type: Permanent
Salary: £75000 - £80000/annum Pension, Good Holiday, Healthcare
Software. In other words, we help the wider engineering team be awesome! The team is responsible for the current Clue technology infrastructure, CI/CD, monitoring, escalated support, and Information Security. The infrastructure is currently a mix of Azure IaaS & PaaS services but we're moving towards a MACH architecture with serverless functions. You will be an experienced hands … on engineer who is passionate about DevOps, Platform Engineering, security, reliability, performance, and empowering the Product Development teams to take ownership for shipping continuously and reliably to production. A key focus for the Platform Engineer is Developer Experience - enabling engineers to build solutions whilst helping to keep everything safe, secure, and cost effective. You will also be influential in … services. Continuously assess and optimize the platform by identifying and addressing performance, scalability, and reliability issues. Ensure the platform adheres to industry standards and best practices in terms of security and compliance. Maintaining and improving our cloud platform whilst acting as a key escalation point where necessary. Ensuring automation, process efficiency and appropriate tooling is utilised to reduce cycle More ❯
for ongoing DR maturity. Ensure the Disaster Recovery strategy and all associated plans are secure by design, embedding appropriate access controls, data protection measures, and alignment with industry-recognised security standards (e.g. ISO 27001, NIST, CIS). Collaborate with the InformationSecurity and Compliance teams to ensure DR aligns with the broader cybersecurity strategy and meets regulatory More ❯
System. Key Responsibilities: · Design & Develop: Create the Cutover & Dress Rehearsal Runbook, including rollback scenario planning with detailed tasks, dependencies, owners, sequencing, and timing. · Collaborate: Work closely with engineering, infrastructure, infosec, and operations teams to validate technical cutover readiness and failback readiness. · Document & Manage: Identify, document, and manage technical Cutover requirements, including data, system configuration, interface activation, and failback procedures. · Define … Establish technical checkpoints, rollback procedures, and contingency plans. · Ensure Alignment: Stay in sync with change management, operational constraints, safety, security protocols, and regulatory standards. · Manage Rehearsals: Oversee Cutover rehearsals, dry runs, and simulations to validate cutover scenarios and runbook viability. · Provide Leadership: Offer technical leadership during Cutover execution, ensuring adherence to the plan and real-time issue management. · Support … developing and executing detailed cutover runbooks for complex mission-critical systems. · Deep knowledge of system integration infrastructure readiness and network configuration in Operational Technology (OT) environments. · Familiarity with cyber security requirements and operational risk management for Critical National Infrastructure (CNI). · Excellent problem-solving, documentation, and coordination skills under high-pressure situations. · Strong communication skills and the ability to More ❯
for ongoing DR maturity. Ensure the Disaster Recovery strategy and all associated plans are secure by design, embedding appropriate access controls, data protection measures, and alignment with industry-recognised security standards (e.g. ISO 27001, NIST, CIS). Collaborate with the InformationSecurity and Compliance teams to ensure DR aligns with the broader cybersecurity strategy and meets regulatory More ❯
of cloud, use of Artificial Intelligence and Robotic Process Automation. Working on client engagements and attend client meetings to identify risks, test controls and provide an opinion on the security of the clients' IT environment. Analysing data and presenting your work with a clear focus on quality. Communicating with confidence, integrity and authenticity to build strong relationships. Assisting in …/finance including IT general controls (ITGC), IT automated controls audit. Knowledge of payments, front-to-back-office controls, change programmes, and Operational resilience. Third Party Risk Management and InformationSecurity auditing experience. Experience working for a professional services consultancy firm, major financial institution or blue-chip industry firm in IT external audit, IT internal audit, or IT More ❯
team activities, suggesting architecture and process improvements, conducting tool evaluations, and researching new technologies to stay ahead in the industry. Security: Ensure infrastructure security and compliance with InfoSec requirements. Team Collaboration: Work closely with team members to ensure successful delivery and implementation of tasks, liaising with management as needed. Mentorship: Assist and guide less experienced team members, fostering More ❯
legal and regulatory change. Reporting to the Group Privacy Counsel, you’ll provide legal advice across a broad range of privacy matters and collaborate with stakeholders in Digital, IT, InformationSecurity, HR, Procurement, and beyond. Key Responsibilities: Advise on the full range of data privacy issues, including compliance with GDPR, the UK Data Protection Act, and PECR Draft More ❯
legal and regulatory change. Reporting to the Group Privacy Counsel, you’ll provide legal advice across a broad range of privacy matters and collaborate with stakeholders in Digital, IT, InformationSecurity, HR, Procurement, and beyond. Key Responsibilities: Advise on the full range of data privacy issues, including compliance with GDPR, the UK Data Protection Act, and PECR Draft More ❯
effectively with cross-functional teams. Results-driven, with a focus on exceeding customer expectations. Basic knowledge of ISO 27001 is essential, along with a willingness to comply with our informationsecurity management guidelines regarding risk, cyber resilience, and operational excellence. You should apply if: You thrive in high-impact roles. If you enjoy building scalable processes and seeing More ❯
London, South East, England, United Kingdom Hybrid / WFH Options
Henderson Scott
InformationSecurity Operations Manager - Software Company Remote-first with occasional travel to London (max once a week) 35-hour working week | 30 days annual leave + bank holidays Are you an InformationSecurity expert looking to make a real impact in a collaborative and forward-thinking tech environment? A leading UK-based software company is going … digital transformation and is looking for an InformationSecurity Operations Manager to lead and evolve their security operations capability. You'll work with a growing, ambitious InfoSec team and be at the heart of protecting systems, services, and data critical to the company's success. What you'll be doing: Lead the day-to-day security operations function, including vendor oversight and management of the outsourced MDR partner Manage and evolve the Security Operations Centre (SOC), guiding a small team of security professionals Coordinate timely responses to security incidents, ensuring proper documentation and post-incident analysis Collaborate with internal teams to ensure policies, protocols and operations align with business objectives and emerging More ❯
teams to deliver quality software to agreed project schedules. Proactively notify Development Project Manager of risks, bottlenecks, problems, issues, and concerns. Compliance with Citi's System Development Lifecycle and InformationSecurity requirements. Drive quality initiatives Provide technical walk-throughs to various stakeholders Be able to work independently as well as within a team Works directly with end-users More ❯
Reigate, England, United Kingdom Hybrid / WFH Options
esure Group
awareness & comms to ensure key messages are understood and data literacy matures Own the delivery of key data governance deliverables and outcomes ensuring requirements of DPO, privacy, legal and infosec teams are met Collaborate with our AI team to **develop** and implement standard methodology for the rollout of GenAI products Work with architects on best design for data products What More ❯
London, England, United Kingdom Hybrid / WFH Options
DGH Recruitment
Job Description InformationSecurity Analyst (6 month Fixed Term Contract) Hybrid working: 3 days per week in the office per week. DGH Recruitment are currently recruiting on behalf a global legal firm who are looking for an InformationSecurity Analyst to join the team on a 6 month Fixed Term Contract to assist with increased work … have the capability to support the team in the delivery of Cyber BAU activities. Responsibilities: - Maintenance the delivery of the ISMS including supporting internal and external audits and maintaining informationsecurity policies and associated document set. - Support on the confidentiality, integrity and availability aspects of the Firm's and client data. - Sustain the Incident Response plans including exercising … and training. - Provide informationsecurity risk assessments to ensure compliance with the Firm's policies with critical and high risk third parties. - Review and complete client cyber due diligence questionnaires in a timely manner. Liaise with the client to close off any remedial actions. Experience/Skills Required: - Practical knowledge of informationsecurity and privacy regulation More ❯
InformationSecurity Manager | Full-time Onsite | Victoria, London | 3 Stage Process | £70,000 - £80,000 bonus We are working with a growing security intelligence business with operations in the UK, Ukraine and UAE. They work across national security, NGOs, government and charity organisations offering intelligence and security risk support in hostile environments. Due to expansion … and increased strategic focus, they are looking for an experienced InformationSecurity Manager to take ownership of their ISO 27001-aligned ISMS, build out governance frameworks and lead security strategy across a global footprint. The role is based out of their Victoria office in London, with an expectation of being onsite 5 days per week initially. The … interview process consists of 3 stages, including technical and stakeholder engagement rounds. Skills & Experience: Proven experience managing and implementing ISO 27001-compliant systems Strong background in informationsecurity governance and risk management Experience with Cyber Essentials/Cyber Essentials Plus accreditation processes Knowledge of UK GDPR (though this will be managed by somebody else) and broader frameworks like More ❯
InformationSecurity Manager | Full-time Onsite | Victoria, London | 3 Stage Process | £70,000 - £80,000 bonus We are working with a growing security intelligence business with operations in the UK, Ukraine and UAE. They work across national security, NGOs, government and charity organisations offering intelligence and security risk support in hostile environments. Due to expansion … and increased strategic focus, they are looking for an experienced InformationSecurity Manager to take ownership of their ISO 27001-aligned ISMS, build out governance frameworks and lead security strategy across a global footprint. The role is based out of their Victoria office in London, with an expectation of being onsite 5 days per week initially. The … interview process consists of 3 stages, including technical and stakeholder engagement rounds. Skills & Experience: Proven experience managing and implementing ISO 27001-compliant systems Strong background in informationsecurity governance and risk management Experience with Cyber Essentials/Cyber Essentials Plus accreditation processes Knowledge of UK GDPR (though this will be managed by somebody else) and broader frameworks like More ❯
Job Opportunity: Junior/Medior/Senior InformationSecurity Consultant (Dutch-speaking) - Brussels - Freelance Location: Brussels Team: Security & Risk, IT Platform Language Requirement: Dutch (CEFR level C2) Experience Level: Junior, Medior or Senior (5+ years) About the Role Are you passionate about protecting information assets and shaping security strategies? Our client is looking for a … Junior/Medior/Senior InformationSecurity Consultant to strengthen its internal ISMS and contribute to the overarching Flemish informationsecurity policy (ICR - Information Classification Framework). In this role, you will be the go-to expert for informationsecurity, working closely with a wide range of stakeholders-from management and developers to … external partners and local authorities. Key Responsibilities Implement and oversee informationsecurity across the organization. Translate organizational security needs into actionable security measures. Develop and maintain security plans, risk analyses, monitoring, incident registration, tools, training, and evaluations. Conduct strategic and tactical risk assessments and support asset-level risk analysis. Monitor and report on informationMore ❯
We are working with a leading FinTech company who are seeking an InformationSecurity Analyst to join their team. This role is crucial in ensuring the security and integrity of information systems and data. The successful candidate will be responsible for implementing and maintaining security measures to protect organisational assets from cyber threats and ensuring … compliance with industry standards. Key Responsibilities Assist in the planning and implementation of security controls and testing to ISO27001 standards. Perform business impact analyses (BIA) across key technology processes, systems, and facilities, identifying gaps in critical information gathered and recorded. Communicate significant changes in Business Continuity plans to the InformationSecurity (IS) Manager. Support the IS … Manager in Disaster Recovery (DR) planning, ensuring that alternate facilities are provisioned and ready in the event of a disaster. Respond to customer security questionnaires to support third-party assurance obligations. Work with business units to ensure Business Continuity Plans are produced and maintained consistently. Provide support and guidance to staff undertaking security awareness training, tracking completion and More ❯
We are working with a leading FinTech company who are seeking an InformationSecurity Analyst to join their team. This role is crucial in ensuring the security and integrity of information systems and data. The successful candidate will be responsible for implementing and maintaining security measures to protect organisational assets from cyber threats and ensuring … compliance with industry standards. Key Responsibilities Assist in the planning and implementation of security controls and testing to ISO27001 standards. Perform business impact analyses (BIA) across key technology processes, systems, and facilities, identifying gaps in critical information gathered and recorded. Communicate significant changes in Business Continuity plans to the InformationSecurity (IS) Manager. Support the IS … Manager in Disaster Recovery (DR) planning, ensuring that alternate facilities are provisioned and ready in the event of a disaster. Respond to customer security questionnaires to support third-party assurance obligations. Work with business units to ensure Business Continuity Plans are produced and maintained consistently. Provide support and guidance to staff undertaking security awareness training, tracking completion and More ❯
Employment Type: Permanent
Salary: £40000 - £45000/annum Plus 11% non contribution pension
InformationSecurity Engineer Buckinghamshire – 1 or 2 days a week in the office Up to £70,000 salary plus a discretionary bonus of up to 15% After a transformative 3-year change initiative, they have outlined a strategic 5-year plan to broaden their impact and enhance our operational efficiency. They are now seeking an InformationSecurity Engineer to continue to develop, optimise, and maintain their security controls to protect the organisation's assets and data. About the role As the InformationSecurity Engineer, you will be responsible for enhancing and maintaining security controls. This role involves working closely with technology teams to ensure robust security architecture, providing expert advice on … security requirements, and managing all technical change activities related to security. You will also identify and address security design gaps and recommend enhancements to existing and proposed architectures. What you will be responsible for? 1.Security Control Development: -Develop and optimise security controls in collaboration with relevant technology teams. -Ensure adherence to architectural principles during design to minimise More ❯
Workplace in Washington Post Top Workplaces Culture Excellence Awards, and we are seeking talented individuals to join our winning team! DKW is currently looking for a Part-Time Senior Information Assurance Analyst to support our team. The individual hired for this position will provide support for our government customers located in Fallon, NV. Overview: The Part Time IA Analyst … such as (but not limited to): • Collect and maintain data needed to meet system cybersecurity reporting • Ensure that protection and detection capabilities are acquired or developed using the IS security engineering approach and are consistent with organization-level cybersecurity architecture. • Participate in an informationsecurity risk assessment during the Security Assessment and Authorization process. • Participate in … the development or modification of the computer environment cybersecurity program plans and requirements. • Recognize a possible security violation and take appropriate action to report the incident, as required • Ensure plans of actions and milestones or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc. • Provide technical documents, incident reports, and findings from computer examinations More ❯
each consultant continues to develop. And when we're done working and learning, there's still room for some fun on the occasional get-together . About the role Security Program manager/CISO ad interim We are seeking an experienced and results-driven Security Manager a.d./CISO a.d. to: Lead and coordinate cross-functional initiatives within … our InformationSecurity domain. Be responsible for planning, executing, and overseeing a portfolio of security programs, ensuring alignment with organizational goals, compliance requirements, and risk management strategies. Collaborate with stakeholders across IT, risk, compliance, and business units to drive the successful delivery of initiatives such as security infrastructure upgrades, policy implementation, and incident response improvements Reporting … to executive leadership. Who you are Strong program management skill Experience as CISO is a big + Solid understanding of informationsecurity principles, and the ability to communicate effectively with technical and non-technical audiences. Experience in managing program budgets and timelines, tracking risks and dependencies. A background in cybersecurity frameworks (e.g., NIST, ISO 27001) and experience in More ❯
Head of Cyber and InformationSecurity London 2 days/wk - up to £120k + Equity and lots of benefits! We’re hiring a hands-on, Head of Cyber & InformationSecurity to join a high-growth company solving one of the most complex and high-impact challenges in cybersecurity today, you’ll be protecting businesses from … done is better than perfect! You won’t be stuck writing policies in a silo — far from it. You’ll be embedded with engineering, product, and support teams, keeping security tightly integrated into everything without slowing innovation. What You’ll Be Doing: Partner closely with Product and Engineering to embed secure practices into the SDLC and production environments. Champion … a security-first mindset — empower and educate teams across the business to take ownership of security. Lead threat modelling and continuous risk assessments — proactively identify and mitigate vulnerabilities. Own and optimise security configurations across devices, cloud infrastructure, and SaaS tools. Develop and evolve the ISMS with ISO 27001 and Cyber Essentials — and scale beyond. What We’re Looking More ❯
Head of Cyber and InformationSecurity London 2 days/wk - up to £120k + Equity and lots of benefits! We’re hiring a hands-on, Head of Cyber & InformationSecurity to join a high-growth company solving one of the most complex and high-impact challenges in cybersecurity today, you’ll be protecting businesses from … done is better than perfect! You won’t be stuck writing policies in a silo — far from it. You’ll be embedded with engineering, product, and support teams, keeping security tightly integrated into everything without slowing innovation. What You’ll Be Doing: Partner closely with Product and Engineering to embed secure practices into the SDLC and production environments. Champion … a security-first mindset — empower and educate teams across the business to take ownership of security. Lead threat modelling and continuous risk assessments — proactively identify and mitigate vulnerabilities. Own and optimise security configurations across devices, cloud infrastructure, and SaaS tools. Develop and evolve the ISMS with ISO 27001 and Cyber Essentials — and scale beyond. What We’re Looking More ❯